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Top Stories 

• The North Carolina Division of Water Resources ordered Duke Energy to stop the flow of 
contaminated water at its Eden power plant February 18, after learning that groundwater 
containing unsafe levels of arsenic is still pouring into the Dan River. - Associated Press 
(See item 1) 

• Halliburton Energy Services was fined $1.8 million by the Pennsylvania Department of 
Environmental Protection for violating record keeping requirements about 255 times 
between 1999 and 2011. - Pittsburgh Post-Gazette (See item 2 ) 

• California health officials stated February 18 that 10 communities are at acute risk of 
running out of drinking water and well water is at risk of being concentrated with 
contaminants due to a severe drought in the State. - Reuters (See item 18 ) 

• Researchers believe the medical records and payment information documents that they 
found on a Web site was posted by individuals who gained access to SigmaCare software, 
designed by eHealth Solutions Inc. - Wall Street Journal (See item 20 ) 
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Energy Sector 



1. February 19, Associated Press - (North Carolina) Toxins leaking from second pipe at 
N.C. coal ash dump. The North Carolina Division of Water Resources ordered Duke 
Energy to stop the flow of contaminated water coming out of a pipe that runs under a 
coal ash dump at its Eden power plant February 18, after learning that the groundwater 
containing unsafe levels of arsenic is still pouring into the Dan River. 

Source: http://www.bdtonline.com/apnational/xl783679477/Toxins-leaking-from- 
second-pipe-at-N-C-coal-ash-dump 

2. February 18, Pittsburgh Post-Gazette - (Pennsylvania) Halliburton fined $1.8 million 
over disposal. Halliburton Energy Services was fined $1.8 million by the Pennsylvania 
Department of Environmental Protection for transporting, processing, and disposing of 
hydrochloric acid without classifying it as a hazardous substance, violating record 
keeping requirements about 255 times between 1999 and 2011. 

Source: http://www.post-gazette.com/business/2014/02/18/State-fines-Hallibutron-l-8- 
million-for/stories/20 1 402 180151 

3. February 18, Billings Gazette - (Montana) Corette power plant shuts down after 
asbestos leak. The PPL Montana-owned J.E. Corette power plant in Billings will 
remain off-line until an onsite remediation and evaluation of repairs are completed after 
the company shut down the coal plant when a steam tube failed on the boiler and 
damaged asbestos-containing insulation February 3. 

Source: http://billingsgazette.com/news/local/corette-power-plant-shuts-down-after- 
asbestos-leak/article aa3c42 17-9947-530f-88ee-fe()cb0569a9e.html 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. February 18, Riverside Press-Enterprise - (California) Riverside: Hazardous 

material spills in industrial fire. A piece of machinery used in fabricating metal parts 
caught fire then overflowed with nickel acid at an A&A Plating warehouse in Riverside 
February 18. The fire was extinguished by a sprinkler system and the chemical spill 
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was contained. 

Source: http://blog.pe.com/breaking-news/2014/02/18/riverside-hazardous-material- 
spills-in-industrial-fire-update/ 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

5. February 18, Softpedia - (National) Bank of the West job applicants told that 
hackers might have stolen their details. Bank of the West began notifying 
employment applicants in February that its Web site was breached and any personal 
information submitted may have been stolen by hackers. 

Source: http://news.softpedia.com/news/Bank-of-the-West-Job-Applicants-Told-That- 
Hackers-Might-Have-Stolen-Their-Details-427708.shtml 

6. February 18, SC Magazine - (International) New variant of Zeus banking trojan 
concealed in JPG images. Researchers identified a new variant of the Zeus banking 
trojan, ZeusVM, that is concealed in a JPG image file to avoid detection by security 
software. The JPG image files contain the malware configuration files that are needed 
to launch man-in-the-middle and man-in-the-browser attacks and allow attackers to 
collect personal information and perform online transactions. 

Source: http://www.scmagazine.com/new-variant-of-zeus-banking-troian-concealed-in- 
jpg-images/article/334477/ 
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Transportation Systems Sector 

7. February 19, WTTE 28 Columbus - (Ohio) Water main break closes 315 on 
Wednesday morning. A broken water main caused police to shut down a section of 
State Route 315 southbound in Columbus February 19 for roughly 3 hours while 
workers located the leak and shut off water in the area. 

Source: http://www.mvfox28columbus.com/shared/news/features/top- 
stories/stories/wsyx water-main-break-closes-3 1 5-wednesday-moming-29348.shtml 

8. February 19, WWMT 3 Kalamazoo - (Michigan) Amtrak train becomes disabled, 
leaving passengers stranded for hours. A Port Huron bound Amtrak train that 
departed from Chicago became disabled in Niles, leaving passengers stranded for 
several hours February 18-19 before being transported to another station. Authorities 
are investigating what disabled the train. 
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Source: http://wwmt.com/shared/news/features/top-stories/stories/wwmt amtrak-train- 
becomes-disabled-leaving-passengers-stranded-hours-18425.shtml#.UwS9vGYo6Uk 

9. February 19, KAAL 6 Austin - (Minnesota) Elk River Police: Driver of car hit by 2 
trains ignored lights, rail arm. A vehicle carrying three passengers was hit by two 
Northstar trains February 18 at Highway 10 and Jackson Avenue near Elk River, 
Minnesota, causing both trains to shut down and passengers to be bussed to their 
destinations. No injuries were reported. 

Source: http://www.kaaltv.com/article/stories/S3330467.shtml?cat=10151 

10. February 19, Associated Press - (Washington) Wash. Ecology Department: Sunken 
vessel leaks gas. The Washington Department of Ecology reported that an unknown 
amount of gas leaked into Gig Harbor February 18 from a sunken 28-foot pleasure craft 
at Lucas Landing. Cleanup efforts were underway while authorities monitored the spill. 
Source: http://www.westport-news.com/news/article/Wash-Ecologv-Department- 
Sunken-vessel-leaks-gas-5247290.php 

1 1 . February 18, KQTV 2 Saint Joseph - (Missouri) Sewer collapse closes highway in 
Hamilton. The Missouri Department of Transportation reported that a section of Route 
CC in Hamilton was shut down February 18 due to a sewer collapse, and will likely 
reopen February 19 once repairs are completed. 

Source: http://www.stioechannel.com/storv/d/storv/sewer-collapse-closes-highway-in- 
hamilton/22636/3NR4cJTHGUeUXTE7sYPD6g 
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Food and Agriculture Sector 

12. February 19, Associated Press - (California) School lunch meat supplier shut down 
by feds. The U.S. Department of Agriculture’s Food Safety and Inspection Service 
suspended operations at a Central Valley Meat Co. slaughterhouse in California 
February 18 due to unsanitary conditions found during inspections. The company 
provides beef to the National School Lunch Program. 

Source: http://www.nbcsandiego.com/news/health/Central-Vallev-Meat-Company- 
Hanford-Fresno-Unsanitary-Conditions-Beef-246 141751 .html 

13. February 19, USA Today - (National) Nestle recalls two kinds of Hot Pockets. Nestle 
USA announced a voluntary recall February 18 of two varieties of its Philly steak and 
cheese Hot Pockets due to the possibility that they may contain meat from a previous 
Rancho Feeding Corp., recall which concluded that the company processing diseased 
and unsound animals without a full federal inspection. 

Source: http://www.usatodav.com/storv/news/nation-now/2014/02/19/hot-pockets- 
meat-recall— nestle/5602453/ 

14. February 18, U.S. Department of Agriculture - (National) California firm recalls 
unwholesome meat products produced without the benefit of full inspection. The 

Food Safety and Inspection Service reissued its February 8 recall of 8,742,700 pounds 
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of Rancho Feeding Corp., beef products February 18 to include distribution centers and 
retailers nationwide. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archive/archi ve/20 1 4/recall-0 13-201 4-update-02 1814 

15. February 18, Reuters - (Iowa) Cargill Iowa pork plant cancels Tuesday first shift. A 
water main break in the city of Ottumwa forced Cargill Inc. to cancel the first shift at 
its pork processing plant February 18. The plant reopened for its second shift after the 
water main was repaired. 

Source: http://www.chicagotribune.com/sns-rt-cargill-ottumwa-urgent- 
20 1 402 1 8 .0.4 1 4724 1 .story 

16. February 18, Wisconsin Ag Connection - (Wisconsin) Some animals lost in Langlade 
Co. barn fire. A bam fire killed a couple dozen young dairy animals and destroyed a 
heifer building at a farm in Langlade County February 16. 

Source: http://www.wisconsinagconnection.com/storv-state.php?Id=210&yr=2014 

17. February 16, Food Poisoning Bulletin - (Hawaii) Hawaii bakery fined $20,000 for 
violations of food safety rules. Kanemitsu Bakery on Molokai entered into an 
agreement with the Hawaii State Department of Health over violations of health codes 
and for not complying to stop sales of its products after having its food establishment 
permit suspended in April and failing a follow up inspection in June 2012. Penalties 
totaled $20,000. 

Source: http://foodpoisoningbulletin.com/2014/hawaii-bakery-fined-20000-for- 
violations-of-food-safety-rules/ 
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Water and Wastewater Systems Sector 

18. February 19, Reuters - (California) Water contamination feared from California 

drought. California health officials stated February 18 that 10 communities are at acute 
risk of running out of drinking water in 60 days due to a severe drought in the State, 
and well water in rural communities are at particular risk of becoming more 
concentrated with contaminants due to less water available to dilute them. 

Source: http://news.msn.com/us/water-contamination-feared-from-california-drought 

19. February 18, Harrisburg Patriot-News - (Pennsylvania) Boil water advisory issued 
for United Water customers in Mechanicsburg area. United Water Pennsylvania 
customers in a portion of Cumberland County were under a boil water advisory for at 
least 48 hours February 18, due to a broken water main in Hampden Township that 
resulted in a loss of water pressure. 

Source: 

http://www.pennlive.com/midstate/index.ssf/2014/02/boil water advisory issued for 
8.html 



For additional stories, see items 1 and 7 
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Healthcare and Public Health Sector 

20. February 18, Wall Street Journal - (National) Nursing homes are exposed to hacker 
attacks. Two cybersecurity firms found a Web site containing documents that could 
allow hackers to potentially obtain electronic medical records and payment information 
from health care providers. Researchers believe the information was posted by 
individuals who gained access to SigmaCare software, designed by eHealth Solutions 
Inc., although the company is unaware of how the files were accessed. 

Source: 

http://online.wsi.com/news/articles/SB100014240527023048997045793891716586719 

40 
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Government Facilities Sector 

21. February 19, San Francisco Bay Area News Group - (California) Three men plead 
guilty to $1 million financial aid fraud at Bay Area colleges. Three California men 
pleaded guilty February 14 to conspiring to commit more than $1 million in financial 
aid fraud and wire fraud. The suspects recruited individuals that had no intention of 
attending local colleges to serve as “straw students,” and then assisted them in 
submitting fraudulent financial aid applications. 

Source: http://www.mercurvnews.com/crime-courts/ci 25174497/oakland-three-men- 
plead-guilty- 1 m-financial-aid 

22. February 19, Softpedia - (National) US Army Knowledge Online site inaccessible, 
hackers take credit for the downtime. The hacker group DerpTrolling took credit for 
taking down the U.S. Army Knowledge Online Web site, making it inaccessible for 
several hours February 19. 

Source: http://news.softpedia.com/news/US-Armv-Knowledge-Online-Site- 
Inaccessible-Hackers-Take-Credit-for-the-Downtime-427831.shtml 

23. February 18, KMOV 4 St. Louis - (Missouri) St. Uouis County Health Department 
main office to remain closed for another week. Continued repair work forced the St. 
Louis County Department of Health’s main office to remain closed for another week 
after the building suffered damage due to a water line break February 8. 

Source: http://www.kmov.com/news/local/St-Louis-County-Health-Department-main- 
office-to-remain-closed-for-another-week-24601461 1 .html 

24. February 17, KBOI 2 Boise - (Idaho) College campus shuts down with threat of 
norovirus. Classes were expected to resume February 18 at the College of Western 
Idaho’s Ada County campus after officials closed the school February 15 in order to 
disinfect the campus when an individual reportedly came down with norovirus. 

Source: http://www.kboi2.com/news/local/college-of-western-idaho-campus-shut- 
down-norovirus-illness-virus-saint-alphonsus-245 899851 .html 
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25. February 17, Associated Press - (West Virginia) Grandview Elementary dismisses 
early after water concerns. Authorities re-flushed pipes at Grandview Elementary 
School in Charleston, West Virginia, after school officials dismissed classes February 
17 when teachers reported minor headaches and dizziness due to a licorice smell 
coming from the water. 

Source: http://www.wchstv.com/newsroom/eyewitness/140217 2330Q.shtml 

26. February 17, WCAX 3 Burlington - (Vermont) Fire forces evacuation at St. 

Michael’s College. A February 17 fire at a dormitory at St. Michael’s College in 
Vermont caused an evacuation and temporary displacement of more than 20 students 
after the fire started in an electric heating unit. Authorities are assessing the total 
damage. 

Source: http://www.wcax.com/storv/24741789/st-michaels-college-townhouse-catches- 
fire-displaces-students 

1 Return to top i 

Emergency Services Sector 

27. February 18, Victorville Daily Press - (California) Service restored at county sheriff, 
fire dispatch in Hesperia. The communications system at the High Desert Public 
Safety Operations Center in Hesperia was restored February 18 after being down for 12 
hours February 17 when the Halon gas system activated in the computer server room. 
There was no disruption of service as operations were temporarily moved to the Valley 
Control Center in Rialto. 

Source: http://www.vvdailvpress.com/articles/hesperia-45123-restored-service.html 

28. February 17, KOCO 5 Oklahoma City - (Oklahoma) Vandals target emergency 
dispatch, cut service to communities. Fire officials at three departments in McClain 
County used a backup system after vandals knocked out emergency service for hours 
when they cut a fence at the emergency communication station near Dibble February 
17. The tower was expected to be fully operational by February 18. 

Source: http://www.koco.com/news/oklahomanews/around-oklahorna/vandals-target- 
emergency-dispatch-cut-service-to-communities/24530550 
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Information Technology Sector 

29. February 19, V3.co.uk- (International) Microsoft crash reports reveal Houdini hack 
campaign hitting firms. A security researcher from Websense found a new hack 
campaign utilizing the Houdini remote access trojan (RAT) targeting a mobile network 
operator and government body while cross-referencing Microsoft application and 
software crash reports. 

Source: http://www.v3.co.uk/v3-uk/news/2329562/microsoft-crash-reports-reveal- 
houdini-hack-campaign-hitting-firms 
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30. February 19, Network World - (International) Zeus malware-botnet variant spotted 
‘crawling’ Salesforce.com. Adallom researchers found that the Zeus trojan, malware 
known to steal banking credentials, was targeting Windows-based computers in order 
to swipe business data from the SalesForce Web site through a ki nd of Web-crawling 
action. 

Source: http://www.networkworld.com/news/2014/021914-zeus-malware-27871 l.html 

31. February 19, Softpedia - (International) Two different cybercriminal groups are 
using IE 10 zero-day in their operations. Security experts believe that two different 
cybercriminal groups are responsible for an attack on the U.S. Veterans of Foreign 
Wars Web site and an attack involving the French aerospace industries association, but 
both groups utilized the same IE zero-day exploit. 

Source: http://news.softpedia.com/news/Two-Different-Cvbercriminal-Groups-Are- 
Using-IE-10-Zero-Day-in-Their-Operations-427949.shtml 

32. February 19, Softpedia - (International) DoS, XSS, and data injection flaws fixed in 
Rails 4.0.3, 3.2.17 and 4.1.0.beta2. Ruby on Rails released fixes to address three 
vulnerabilities, including a data injection flaw impacting Active Record, a cross-site 
scripting (XSS) vulnerability, and a denial-of-service (DoS) issue in Action View. 
Source: http://news.softpedia.com/news/DOS-XSS-and-Data-Iniection-Flaws-Fixed-in- 
Rails-4-0-3-3-2-17-and-4-l-0-beta2-428015.shtml 

33. February 19, Help Net Security - (International) US businesses suffered 660,000 
internal security breaches. Researchers at IS Decisions found that in the last 12 
months, over 660,000 internal security breaches took place in U.S. businesses, and only 
about 17 percent of information technology managers consider insider threats to be a 
top priority for their organization. 

Source: http://www.net-security.org/secworld.php?id=16379 

34. February 18, Softpedia - (International) Hackers posted details of 300,000 accounts 
on Pastebin in the last 12 months. Researchers discovered that in the last 12 months, 
over 300,000 accounts’ credentials were published on Pastebin through two main 
sources of information leaks including, insecure Web applications and compromised 
user machines with installed trojans. 

Source: http://news.softpedia.com/news/Hackers-Posted-Details-of-300-000-Accounts- 
on-Pastebin-in-the-Last- 1 2-Months-427 658 . shtml 

For another story, see item 6 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

35. February 19, Akron Beacon Journal - (Ohio) Giant Eagle Market District store in 
Green reopens after concerns over roof. The Giant Eagle Market District store in 
Ohio was evacuated February 18 after sections of the store’s roof bowed under the 
weight of snow and ice. The store reopened about 3 hours later, after workers removed 
the snow and ice and crews inspected the roof. 

Source: http://www.ohio.com/news/giant-eagle-market-district-store-in-green-reopens- 
after-concerns-over-roof- 1 .467396 

36. February 18, Associated Press - (Rhode Island) Fire at Newport Wal-Mart under 
investigation. A Walmart in Newport was evacuated and closed indefinitely after it 
sustained significant smoke and water damage during a fire February 17. Officials ruled 
the incident as suspicious and are continuing to investigate. 

Source: http://www.boston.com/news/local/rhode-island/2014/02/18/fire-newport-wal- 
mart-under-investigation/Ywx5blB0fEuuoGkK4ILoDN/story.html 

37. February 18, WTLV 12 JacksonvillefWJXX 25 Orange Park - (Florida) Suspect in 
Lava nightclub shooting still at large. Jacksonville police are investigating a 
February 18 shooting at Fava nightclub in Jacksonville that left three people injured. 
Source: http://www.firstcoastnews.com/storv/news/crime/2014/02/17/iso-arlington- 
universitv-aggravated-battery/5546939/ 

38. February 18, WLEX 18 Lexington - (Kentucky) Unknown device found at 
Rockcastle County business after bomb threat investigation. The Kentucky State 
Police Bomb Squad deactivated an unknown device found during a search of the 
Brodhead Tobacco and Tanning in Rockcastle County February 18. The business had 
received a phoned bomb threat, which prompted the investigation and search. 

Source: http://www.lexl8.com/news/unknown-device-discovered-at-rockcastle-county- 
business-after-bomb-threat-investigation 

39. February 17, Hawley News Eagle - (Pennsylvania) Fire occurs at Ledges Hotel. A 
heating/ventilation air conditioning unit sparked an attic fire and forced patrons and 
staff to evacuate the Ledges Hotel in Hawley February 14. The hotel remains closed 
due to extensive water damage and will reopen once repairs are completed. 

Source: 

http://www.neagle.com/article/20140217/NEWS/140219688/1005/NEWS/?tag=l 

40. February 16, Florida Times-Union - (Florida) One dead, four injured in shooting at 
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Murray Hill nightclub. Jacksonville police responded to the Fat Kat nightclub in 
Murray Hill February 16 after gunfire broke out inside the venue and left one person 
dead and four others hospitalized. 

Source: httD://iacksonville.com/news/crime/2014-02-16/story/one-dead-four- injured- 
shooting-murray-hill-nightclub 



Dams Sector 

41. February 18, Sarasota Herald-Tribune - (Florida) Water level lowered to assess 
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Lake Manatee Dam damage. Manatee County officials continued to lower water 
levels on Lake Manatee in order to inspect where erosion has set in and to determine 
where to pour concrete to secure the dam. Fixing the critical areas could take 70 days 
and is expected to cost between $3 million to $6 million. 

Source: httn://www. heraldtribune. com/article/201 402 18/ARTICLE/ 14021 9623 ?tc=ar 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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